CVE-2006-6605
Last modified
CVE-2006-6605 is a vulnerability of currently unknown severity. Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command.. EPSS estimates a 5.84% chance of exploitation in the next 30 days.
Description
Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mailenable | Mailenable Enterprise | <= 2.35 |
| Mailenable | Mailenable Enterprise | 1.41 |
| Mailenable | Mailenable Professional | <= 2.35 |
| Mailenable | Mailenable Professional | 1.84 |
| Mailenable | Mailenable Standard | <= 1.98 |
References
- http://secunia.com/advisories/23127Patch, Vendor Advisory
- http://secunia.com/secunia_research/2006-75/advisory/Patch, Vendor Advisory
- http://secunia.com/advisories/23127Patch, Vendor Advisory
- http://secunia.com/secunia_research/2006-75/advisory/Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-6605?
How severe is CVE-2006-6605?
How do I fix CVE-2006-6605?
Are you affected by CVE-2006-6605?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
